vulnerability
Moodle: Incorrect Authorization (CVE-2022-0984)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:L/Au:S/C:N/I:P/A:N) | Apr 29, 2022 | May 12, 2022 | May 12, 2022 |
Severity
4
CVSS
(AV:N/AC:L/Au:S/C:N/I:P/A:N)
Published
Apr 29, 2022
Added
May 12, 2022
Modified
May 12, 2022
Description
Users with the capability to configure badge criteria (teachers and managers by default) were able to configure course badges with profile field criteria, which should only be available for site badges.
Solution(s)
moodle-upgrade-3_10_10moodle-upgrade-3_11_6moodle-upgrade-3_9_13
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.